Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/323830343a353634303a663730303a3a2f34302d3430203d3e20323637393836.roa
File:                     323830343a353634303a663730303a3a2f34302d3430203d3e20323637393836.roa (raw, json)
Hash identifier:          BS4rU2mOf10xi540nTOGnesXRoR0D6bruAji/01E0zU=
Subject key identifier:   63:F8:1B:3A:07:CE:B9:B6:43:10:6C:E1:F2:04:8A:35:A8:67:16:AE
Certificate issuer:       /CN=8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A
Certificate serial:       4A2707CDAF1B22D8D0EDE5EC6B23FECE8726CA7F
Authority key identifier: 8F:B9:2C:AE:23:D0:DE:35:CE:9F:CF:F3:EF:73:D5:9A:E2:96:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/323830343a353634303a663730303a3a2f34302d3430203d3e20323637393836.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 11:55:00 +0000
ROA not after:            Fri 26 Jan 2024 12:00:00 +0000
asID:                     267986
IP address blocks:        2804:5640:f700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:27:07:cd:af:1b:22:d8:d0:ed:e5:ec:6b:23:fe:ce:87:26:ca:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A
        Validity
            Not Before: Jan 27 11:55:00 2023 GMT
            Not After : Jan 26 12:00:00 2024 GMT
        Subject: CN=63F81B3A07CEB9B643106CE1F2048A35A86716AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:48:d1:54:91:ba:78:f7:ef:ce:0d:02:3c:
                    c7:4e:c5:c5:49:08:34:cb:9c:bb:40:52:61:f4:ef:
                    2f:ca:ae:6e:4c:c9:68:e0:90:35:04:8f:3e:92:34:
                    a0:c6:fe:d8:27:9e:86:f8:a3:b5:87:72:bd:19:71:
                    76:f2:89:1f:31:0d:28:a4:a6:01:74:dc:44:64:41:
                    e5:93:2a:b8:c8:20:ae:cd:5c:50:15:3d:4e:e0:21:
                    b5:fd:16:21:d5:99:3b:67:88:19:ea:2c:ac:7c:7e:
                    47:73:6f:6b:1c:ef:a9:c5:8e:7b:84:89:14:f1:93:
                    b0:4d:c8:fc:05:a1:4c:4b:a4:9c:c2:63:06:aa:38:
                    ef:f6:66:4d:b7:c8:e5:19:58:b7:7e:e4:64:43:98:
                    58:a8:b1:27:21:80:ec:5d:24:be:82:0b:02:c4:6b:
                    f3:69:63:4c:41:df:54:e5:19:53:bd:85:94:bd:7e:
                    aa:eb:80:81:34:12:80:75:d1:e5:37:36:43:b8:2f:
                    4f:33:91:3c:d1:ba:bb:d4:62:01:30:b3:c1:08:5f:
                    3d:f4:7b:05:02:6b:a8:92:7a:24:57:28:1a:b1:6e:
                    7f:5a:58:b5:8e:dd:2a:c7:78:53:a6:6b:91:59:95:
                    48:24:3d:6b:3c:27:b1:94:dd:e1:37:ab:d6:4b:39:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:1B:3A:07:CE:B9:B6:43:10:6C:E1:F2:04:8A:35:A8:67:16:AE
            X509v3 Authority Key Identifier:
                keyid:8F:B9:2C:AE:23:D0:DE:35:CE:9F:CF:F3:EF:73:D5:9A:E2:96:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/323830343a353634303a663730303a3a2f34302d3430203d3e20323637393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5640:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:08:02:6a:32:af:48:81:ed:32:4b:37:be:2c:48:04:3d:26:
         fc:c2:c9:ef:bc:7d:f3:87:73:3b:9d:1f:33:f4:20:d8:97:46:
         3e:3e:b5:fe:62:80:d1:5c:8a:77:ee:60:b5:77:b2:4d:10:39:
         e9:29:27:81:2c:3b:ab:7a:53:94:a5:25:2c:e8:4a:25:98:d6:
         6d:73:11:a4:24:85:57:dd:25:91:0d:e8:f6:18:a4:c9:c4:83:
         66:7d:8c:5d:4f:29:0e:8c:5a:f3:d1:9a:86:c8:57:4d:0d:fb:
         2c:e0:54:7a:12:2a:bd:fc:2b:ee:e0:78:32:e9:43:77:10:b7:
         11:7f:25:28:ef:f5:c9:53:ae:cd:93:e0:ce:71:b9:5f:1d:ee:
         14:64:07:28:5f:43:2a:9f:58:d3:68:6e:65:b3:0e:6f:5e:07:
         69:2c:6d:d6:45:90:d4:42:e0:dc:d6:94:0d:6e:8d:ab:a1:af:
         e8:20:16:f1:93:5e:13:fd:40:a9:06:6f:39:3e:5a:61:e3:99:
         8f:79:8a:9b:83:8b:b6:98:64:be:17:ed:fd:52:12:a8:71:19:
         fb:84:1e:32:a4:ef:6e:7d:14:6a:24:e2:2f:f7:37:81:b5:b3:
         dd:07:a3:d2:ad:20:60:01:5c:75:a2:4b:11:2f:82:5d:a7:76:
         ca:e3:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org